Black Friday & Cyber Monday Hunting Sales with JoomDonation by using coupon code BLACKFRIDAY2024 to get 20% Off (Until 03 Dec 2024)
OS Property released notes

OS Property 3.12.9 released - Security issue fixed!!!

  • Mr. Dam
  • Topic Author
  • Offline
  • Administrator
  • Administrator
More
6 years 9 months ago - 6 years 9 months ago #110149 by Mr. Dam
The OS Property developer team are proud to announce the resolved security issue of in OS Property. The issue came from Advanced Search tool of OS Property.

Project: OS Property extension
Impact: High
Severity: Low
Versions: 3.12.7 or lower
Exploit type: SQL injection
Reported Date: 2018-Feb-22
Fixed Date: 2018-Feb-27

Description
The lack of type casting of a variable in SQL statement leads to a SQL injection vulnerability in Advanced Search tool of OS Property extension.

Affected Installs
OS Property 3.12.7 or lower

Solution
Upgrade to version 3.12.9
Last edit: 6 years 9 months ago by Mr. Dam.

Please Log in or Create an account to join the conversation.

  • Nicholas Johnson
  • Offline
  • Senior Member
  • Senior Member
More
6 years 9 months ago #110165 by Nicholas Johnson
Replied by Nicholas Johnson on topic OS Property 3.12.8 released - Security issue fixed!!!
I am getting parsererror when installing this?

Please Log in or Create an account to join the conversation.

Moderators: Mr. Dam